128.199.232.159

Classification: Neutral

128.199.232.159 is a neutral IP address. Reported by 3 threat sources, last seen 2023-08-10. Network: AS14061 Digital Ocean Inc.

MITRE ATT&CK associations

Malware families: DRIDEX (S0384)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
ET CNC Feodo Tracker Reported CnC Server UDP Emerging Threats 2021-10-01 04:30:18 2023-08-10 12:47:22 malicious-activity
ET CNC Feodo Tracker Reported CnC Server TCP Emerging Threats 2021-10-01 04:30:16 2023-08-10 12:47:18 malicious-activity
Dridex FeodoTracker Abuse.ch 2021-12-14 21:17:40 2023-07-07 00:00:02 malicious-activity S0384 Dridex
Dridex ThreatFox Abuse.ch 2021-11-25 00:07:13 2022-07-06 17:32:57 malicious-activity

Tags

c&c dridex port:6225

Whois information

AS name
AS14061 Digital Ocean Inc
AS registry
ripencc
AS date
1999-04-12 00:00:00
AS CIDR
128.199.192.0/18
CIDR
128.199.0.0/16
Registrant
DigitalOcean, LLC
Address
101 Avenue of the Americas, 10th Floor New York 10013 UNITED STATES
City
Singapore
Country
SG — Singapore 🇸🇬
First indexed
2021-10-01 04:30:16
Last updated
2023-08-10 12:47:22

Malicious IPs in the same CIDR

128.199.255.180 128.199.255.160 128.199.247.154 128.199.212.25 128.199.228.252 128.199.205.41 128.199.198.62 128.199.223.38 128.199.244.247 128.199.205.167 128.199.229.17 128.199.254.13 128.199.225.7